468 matches found
Remote code execution
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
CVE-2020-20210
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
CVE-2020-20210
Bludit 3.9.2 is affected by CVE-2020-20210, a Remote Code Execution (RCE) vulnerability exploitable via the /admin/ajax/upload-images endpoint. Public sources consistently describe an RCE risk on this version (high impact). The CVE is documented across multiple feeds (NVD, Red Hat, OSV, CNVD, CVE...
CVE-2020-20210
Bludit 3.9.2 is vulnerable to Remote Code Execution RCE via /admin/ajax/upload-images...
Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated) Exploit
-- coding: utf-8 -- /usr/bin/env python Exploit Title: Bludit 3.13.1 Backup Plugin - Arbitrary File Download Authenticated Date: 2022-07-21 Exploit Author: Antonio Cuomo arkantolo Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.13.1 Tested on:...
Bludit 代码问题漏洞
Bludit is an open source lightweight blog content management system CMS. A security vulnerability exists in Bludit version 3.9.2, which stems from vulnerability to Remote Code Execution RCE attacks via /admin/ajax/upload-images...
Bludit Arbitrary File Download
-- coding: utf-8 -- /usr/bin/env python Exploit Title: Bludit 3.13.1 Backup Plugin - Arbitrary File Download Authenticated Date: 2022-07-21 Exploit Author: Antonio Cuomo arkantolo Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.13.1 Tested on:...
PT-2023-11548 · Bludit · Bludit
Name of the Vulnerable Software and Affected Versions: Bludit version 3.9.2 Description: The issue allows for Remote Code Execution RCE via the "/admin/ajax/upload-images" API endpoint. This means an attacker could potentially execute malicious code on the server. Recommendations: For Bludit...
Bludit < 3.13.1 Backup Plugin - Arbitrary File Download (Authenticated)
-- coding: utf-8 -- /usr/bin/env python Exploit Title: Bludit 3.13.1 Backup Plugin - Arbitrary File Download Authenticated Date: 2022-07-21 Exploit Author: Antonio Cuomo arkantolo Vendor Homepage: https://www.bludit.com Software Link: https://github.com/bludit/bludit Version: 3.13.1 Tested on:...
CVE-2023-34845
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...
CVE-2023-34845
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...
Bludit 代码问题漏洞
Bludit is an open source lightweight blog content management system CMS. A code issue vulnerability exists in Bludit v3.14.1, which stems from an arbitrary file upload vulnerability in the component /admin/new-content that allows an attacker to execute arbitrary web script or HTML by uploading a...
CVE-2023-34845
Summary: CVE-2023-34845 affects Bludit v3.14.1 through an arbitrary file upload in the /admin/new-content component, enabling execution of arbitrary web scripts or HTML via a crafted SVG file. Exploitation details indicate stored XSS possibilities within the new-content flow, with a PoC available...
CVE-2023-34845
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...
PT-2023-25030 · Bludit · Bludit
Name of the Vulnerable Software and Affected Versions: Bludit version 3.14.1 Description: The issue allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file in the /admin/new-content component. This is possible due to an arbitrary file upload vulnerability. It's...
CVE-2023-34845
Bludit v3.14.1 was discovered to contain an arbitrary file upload vulnerability in the component /admin/new-content. This vulnerability allows attackers to execute arbitrary web scripts or HTML via uploading a crafted SVG file. NOTE: the product's security model is that users are trusted by the...
Bludit CMS v3.14.1 - Stored Cross-Site Scripting (XSS) (Authenticated)
Exploit Title: Bludit CMS v3.14.1 - Stored Cross-Site Scripting XSS Authenticated Date: 2023-04-15 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/releases/tag/3.14.1 Version: 3.14.1 Tested on: Windows 10, PHP 7.4.29, Apache...
Bludit cross-site scripting vulnerability (CNVD-2023-43230)
Bludit is an open source, lightweight blog content management system CMS. A cross-site scripting vulnerability exists in Bludit version v3.14.1. The vulnerability stems from the application's lack of effective filtering and escaping of user-supplied data, which can be exploited by an attacker to...
Bludit CMS 3.14.1 Cross Site Scripting Vulnerability
Exploit Title: Bludit CMS v3.14.1 - Stored Cross-Site Scripting XSS Authenticated Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/releases/tag/3.14.1 Version: 3.14.1 Tested on: Windows 10, PHP 7.4.29, Apache 2.4.53 CVE:...
Bludit CMS 3.14.1 Cross Site Scripting
Exploit Title: Bludit CMS v3.14.1 - Stored Cross-Site Scripting XSS Authenticated Date: 2023-04-15 Exploit Author: Rahad Chowdhury Vendor Homepage: https://www.bludit.com/ Software Link: https://github.com/bludit/bludit/releases/tag/3.14.1 Version: 3.14.1 Tested on: Windows 10, PHP 7.4.29, Apache...